| Package | Affected versions | Patched versions |
|---|---|---|
| mq operator | = 3.3.0= 3.4.0= 3.4.1= 3.5.0= 3.5.1= 3.5.2= 3.5.3= 3.6.0= 3.6.1= 3.6.2= 3.6.3= 3.6.4= 3.7.0= 3.7.1= 3.7.2= 3.8.0= 3.8.1= 3.9.0= 3.9.1= 3.9.2= 4.0.0= 4.0.1= 4.0.2= 4.0.3= 4.0.4≥ 2.0.0, ≤ 2.0.29≥ 3.2.0, ≤ 3.2.29 | |
| supplied mq advanced container images | = 10.0.0.0= 10.0.0.5= 9.3.0.0= 9.3.0.1= 9.3.0.10= 9.3.0.11= 9.3.0.15= 9.3.0.16= 9.3.0.17= 9.3.0.20= 9.3.0.21= 9.3.0.25= 9.3.0.3= 9.3.0.4= 9.3.0.5= 9.3.0.6= 9.4.0.0= 9.4.0.10= 9.4.0.11= 9.4.0.12= 9.4.0.15= 9.4.0.16= 9.4.0.17= 9.4.0.20= 9.4.0.21= 9.4.0.25= 9.4.0.26= 9.4.0.5= 9.4.0.6= 9.4.0.7= 9.4.1.0= 9.4.1.1= 9.4.2.0= 9.4.2.1= 9.4.3.0= 9.4.3.1= 9.4.4.0= 9.4.4.1= 9.4.5.0= 9.4.5.1 |
IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle access on unencrypted channels to cause a denial of service in client applications using asynchronous message consumption due to improper validation of queue name length values.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free